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Abstract 



A security management and audit of a business information system in accordance with an information 
security policy is simplified. Provided is a security management and audit program database 133 in 
which the information security policy and an object system correspond to management and audit 
programs. The management and audit program corresponding to a range of the information security 
policy and the object system, which are designated by an operator, is retrieved and automatically 
executed. The management and audit program performs a management and audit concerning an 
information security policy of an object system corresponding to itself 
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f^Tfi 1 0 (X7"-y7"S802. S803). -efl* 1 ^. ^7"D 

tS)*?iJ632$rM^^. Xf •y7*S702f 3!S?S*Ut i^X 
fA (vXf AlfiSfif- X13U3*5 ^X¥\ 

T54j CYES*^«i$ixTV^) CO^SiJ^(SYSID)c7)*4i 
?rfflV>T^dU^-yrS804. S805). 

[004 1 ] 127^0. 1^ • E47o/5A 
<oaaj^t>&fc. -tf^-fe^ray-r-f^y ^-/-t^ra 
'Jf -(fl- ^rn^^A|RBlWt$i]ffllSI5113{i. A 
Jll^Jfflia5114SrfflV^Ts ^^«16iC. 01 llZTfct 
J; 5=5:. WfS-fe^f a y -r -f ^'J ^-O^S&K^ 

JUf >yrS706). 

[0 04 2] 01 lCfcwc. rj^gasijj 1001*5 J;l/ 

r-fedfay-TMBSSgj 1002<O#Jia«i. tPfi-feJfa'jT 
-f .-KU^-x-^^— X132^J52. 53t. %tl-?htt 
JJ5UT*50. X-f-y rS704T-StR $ tlfi: (YES^iJ54tC^ 

Mj 1001*5 it^ r4s4f A yr-*JS«j 1002co#JSSlc*5 
<ffB|^»i^EC7)«^fc^:l.tf$B-fe^ay-f-f^y^ 
-$rlib-l»oti1SSc3l^f-l»ii:^T'^&. ^7t. 
r<gJIj llOlii. flHB-fe* A'Jf--f>Kyi^-<?5affl«a. 
firD/^A^fflv^, aiWUfcflMf-fe^Ay-r-f^ 
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$g-feJf jl 'J t 4 * 'J i^-tcMi7-i)1t#-fe ^f-j-Uf -(^'J 

[ 0 0 4 3 ] £T , JftflsfHC J: 0 . ^ U x * 

5£ j 1102O WfixfrcDtf ? y #gfl? £ ft 6 k (X-f ••/ 7*S 
707), fSIS*^a 'J f -i^'J W-fe^i 'J f -ffl • 

*-*133W»JEttW>W623. rgj ?3 

^7A?r. * y h7-?33£tf-LTigilrr£. 
[0044] SMRSfUt*.? ""tSj HOlt'fc&lS 

^mtt«<i320«^ai6±^ . fc 1 1 (2H 1 2 tz*rt 
i^. -te* * U T -r i^X-f AcO^S^E^r fc'cO^SH 

-?33£:ff LTtif «* * a >J t -f * 'J y-/-fe# * U t 

* *« • iarn^5Areift»"jiw«»ii3fc:jc»f 

[004 5] =5rfc, HI 2li. HStc^-rflHR-fe* *U 
f -f^U >— f— :J"<.— X132fc±5Wt\ ffiMWM52 
rvmtlS&VBlZA » •fe^a , J'7 i -4ieS53 r P^'J • tSSE 

df-jLyx-f^y^- r AirrH-oij i'smth'smr^^ 

n^7A=&621 <"ADM_USR_#2 j ) #ifflBl3*Ufc*£*>W 

[0046]-*> Xx-y7"S707fc*3V^T, gtiRSft/c 

«BlhO«l-KaErn^i»»136tf!>^t>, -tffiOJ: 

«f , H 1 3 1=5** ,k o JflriUfl^Jtte i->T. -ecol^r 
o^A^'iaE^fi^yXf^-b^J- y T-ri££2rfr 
3(X-r-yTS709). *LT, *<9*SSI«r. +7^7-7 
33£tf- LT , *PS** a 'J x 4 sK 'J a'Jf< 



s-wss-t * a y t ^ at y v—i^ • KseaMeaBi** 

[0 04 7] 3r*3, 013(1 HSC^-Wffi-b^Ay 
T 4 jK'J r-^"<-X132^*3^T , Sfe3BSS'J52 

•f.-K'Jv'— r ACCADM-01 j Jrl^-r^SSra^^AT- 

t-^&sxissetw^a meco'm.T^y 

9A£621 TAlJDIT_LOG_# 1 j ) ^gffi) $ tltzt§r£cr>m£ 

7 , a/5Ai** !( H • iaEH«H1WB2i:fc:-f ^X h 
—IV $ iliSD) $ hX ^ S 5112 LUf'v 7"S170 

1), <Xfc» *^flBWBlfl!n^*»«#S<iTV^*»*:WB 
■ti Ut •/ 7^1702). -f-ix*^. mmmitvmwsfi 
a sue? « - k tj& s'A^aiT-o ^5 a«o^s» 

WBti (Xr-y7"S1703). -tUT. ±T«WBfllUC 
i^SStLT r^MSrj Srtff^-fe^-xyT-fJKy^- 

/•tdf i y f - -f ■ AW*#WJffliia5ii3 

*J M-fe^i'Jf-f^JW^a'Jf^i- 
^7 , a/'7AiIft WJ^H3tCJ5^-ri> (XT' ••/ 7* 
S1704). 

[0048] H7t=R0. flHB-k# a U t* #U 

i^-/-fedr * y t- •< 1=3 • ^7*o^7 AWj£Wt#Jfll 
*U3W:. S£^*^J5^5rS(ti; •!> i: . ^ixSr^^ 
gl6lc^-t-S. (Xt- y 7°S710) . 

[0049] fcLh, *JfeH^<0» 1 SOfiKBtov vCBWH 

[0050] fci^t. **i£^st'{i, mA<n-ruy 
^^XTAcotSfiySSSffi#ST-^<-xi3Hcfcv^ 

ro^A £Hfirt& J: 5 C LT fc J: v^. 
[0051 ] **J. ^BSS'JS:#{it LX . HBm • 

tf . »co i 9 a £ k * { T'^ £ . 
[00 52] 111 4t±, giteJSm5r. 04fc7nTv'XT 
A CDfilEKIgSfSWSgT- ^<-X131C0SaSS')42fe^, 
El 5 fc^rf tf?8-fe I'Jf-f.-K'J i^-T— ^ ^-XCOjfe 
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[00 531 01 4$>ftV>«01 5lZ&^X. titf^ 
ii, ??\20\*%i'fct&ZtX\ ^EfI53'J42*l<7>i££*£ 

SH202£*g5£U ""ffSfflJ 1203£iH#?L*:2:^ 

[00541 017 fciJlfVt . Sf^ti. SEBS*fc:« 

IHEtiatUfcV^*^, 5'11402<?5S»?ll5rf-x-^U 

tOh<ni&9> r «31j 1402, fcft^ti, gaErn^A 

fH V r ^cJ 14035riMlR-rS^i:^T-# 

ft. 

[0 0 5 5101 6tt. l^ttX*. ia5tcSrt1f«-fe 

df Ay-r-fJKyv'— 1 f— 9^— Xc7)J65KaS'J52ftC 0 

SttJ5'J42«?). at^Jl^aS'J^-lr^ *>Jf^ $£381*53 
lc*f-rftllS£^9i 1 J-£-£. V^WP-y-ff-h^ 

[0 0 5 61 01 6{CfcWC. SWNH*. ^^1501*» 

05^-rtfiB-fe^Ayx'f^yv—f-^^- 

[ 0 0 5 7 1 $T , ^QfidSlc XfiM , OT^J: 3 * 
3&&#J>ft. 

[0 0 581 (DIM^fl'i^^t^^ 
ASrfgJgU flHB-b*iU-f-f3KU^-*iW?-rft^*t 
T, -ecom^T^Sii^ft-k^iy-r^WSI- ^7'o 

fc-fe* lUf-f yXfA t 0*«Effr{t# t S& i: 3: ft . 
[00 591 (2)Sf^* s A^L^fff8-b d f^y-r^^ 
y is— wWWISSrJBj&rftWC. *<0««^7 S 'A 

As-etirrft-fc^T'^ft. zntztb. tfffB-fe^yT- 
-gJItfsBfc&ft. 

[00601 (3)«fNh^AA UfcflfflHs** 'Jf ^ 
*xA<7tfg$g-b^ xUf ^'J y-tl^" < -fe^f a 'J -r 
■te * a y -f ■< * y ^-Kft o fctWS fAWlfflll 
^(D^\,z tUfife* 1 ^ fc ft . 



[0061 1 *^£OS2H^SStCOl%TlKB« 
•fft. 

[00621 *w»Birtti. ±fiewm 1 n«*STt& 
m%$\ ^-^roymaiy^n-Mzmmt^ ttss-t^f ^ 

o izim-t ^^nz-o^xw^t ft . 

[0063 1 ai8C. -fe^fiijf -fJK'J v'— • E 
[00641 W&n-th *H^ffiT-fflv->ft-fe^ 

2 icTK-rs? 1 mtmm<r> tot s^fcrisjei t$> ft . tz 

ft£U CPUlltf, ^gliE1^*13±fct&lft$ixTv^ft 
3dSrn ^ 7 A134 £ ;>< 'J 12±tc o - h' L*?T-$- ft £ 

ttci'), ^S5teis^si3±tc, isAy-A-ffitimffifm 

itf-fe^^yx-r^ • ^Tdj/^Ax-^^-xis 
3fci!]D^T, «S • &£#*i'XT-Ac7)*ifi^5'tf?fi/-te 

-^<-X135lC«i, 0 6 Uc^i'Jf -( • 
^E7"n ^ 7 Af- ^"<.-X133tC*JV JtJEfttt* 1 ^ 
iXTVft^Sro^5Ac0^f t <t 0 SKro^5 ACO 

-fe^Ay^-fliS^^^i:. SK^fAt«W6V 

^UrT ft i: v ^ fcS8flttB**«tt * ^ft • 

[006510191;:, ^Bt^^^T-^^BS; 

-r. 

[00661 0*, 3-firlCi$V>T, 5'J7lWi, l^rn 
^5A<7)^«>(AUDITID)^iea$flft. W72teii. W71 
eOitlS-tftffia^ie^^^AUDITIDlc.J: O^ffe^^ft^ 
Sro^7A^'W^-tft^f-A<7)SYSID721 (-b^ J. 'J 
f -fWS • SaEra^^Ar-^^-^lBBJ: 

^ft) fc, ^I^Ero^AtOll^ftCiOSYSIDTZlT- 

|,y7h'>i77 , omW7 h->XTSS'J722, T 
a ^ 7 A=SI§^23fc i 1'* a <-/^t^r>tiW 
frtff$g724fc, ^M^^^A^llJ-rft^^SS^fc 
il/M^ffifS726i:Sr-&0, SiSSrD/?^^ 
Mmfc-rft^X-rAcO^i^ffifS^fSai^ixft. ^ 
^, ^J73t3(i, H71»»KrftWfcEaa*».fcAUDITID 
(ci; 0 ! Rf^$^ftl^7'o^7AO»?f^«t 0A#L 

-^"<-xi33^t5^-c mm&rvfv-ktettfcMf 

^fLTV^ftP0LCVID61CJ: D^^ixftlft^-fe^ 'J ^ 
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A^>»«K:|!Wft»jaWB**Kai-* . * y -T < * 

©732 1 LT , 4f*)J: 3 3rflWHfcA¥-$-&*»«:. i^Sc?" 

J^MB-fe^a 'J *r 4 S^- *fc «t -»T & . 
[00 67] ^^a'Jf^f'J^-tl-I 

[00 68] 02 0*4, ■fe^j.'Jf^sK'Ji'-ira • 
£2fefI^H31' £ffll^^T^ETrfrg&«?8^X-TA 

4. 

[0069] 0*-f •£> i o *^S6JBJRK J: Stf $8^ 
[0 0 7 0] CDiftff7i-X 

«5^^f-AOtt«^«*tfttt (2001) , SKIt*^*?- 
dcO-fedfi'J^r-f ft«2rJL— ^t;S?Kt-C (2002) , ^ 

4 (2003) . 

[0 07 1] ©IA7x-X 

JL-- IfiOtSfs^X^fc-b^ i'Jt^-K'J v— ^ • & 
3Sdgf£^31' (2004) . *LT» HiiStit?8 

<*ry ^-teR^&^Ayx^'KSrf&BJrL (2005. 

2006) , «aHt=nst"c. aK^x^w-b^fay'f-^* 

©Sr^lE-rS (2007 , 2008) . 
[0 0 7 2] 

i— FOffiffgv-X-rAcT), »W-7x-X-C*S£**Lfe1f 
fg-fe 3f jl y -r 4 # y >— I" Wi" 4 -b * a y t- * =K® £ 5t 
^W^BiL (2009 , 2010) , gA7x-Xf£tc, V7 
h>)l7A'-y 3 >, M^fcVWJtittf^*>4^<i-b^ 

Ay7-*tt«fcSE*P*->fcfllH | r*1Sffil' (2011) - * 
SlcjEtT^iSffiSrcO-b^f j.yT-'f^^H't^ (20 

12) . a 'J f ^ CE RT(C 

omputerEmergency Response Team) j. 'J -r 4 ffi 



(2013) , -b^iy^-f^t^^ig-r^^^t^® 

BhMttfcLT (2011) , *^**»J-r 4 
h (2012) . 

[0073] 'gwsiz. z.—ifffxmi'Z.T-kfr 

hX^Ltz*.* 4m8ti&& (2010) fc-b^'Jf- 
4 ffiffSaBB* 4 ^* Lfc -b^f * 'J X -f *-/Hit$fi ( 2013 ) 
«l£«S«$B'r-7'<-X13U tit$g-b* * 'J T 4 

^a'Jf^ 

• S$7*C?/7At — — X133t:i|jt9feefiX&J: 'pfc 

Wfg-b^E- i y x -f y ■ ss^sr 0^7 Ai3 

B*§ixl.<fca^-r-?.hi^ (2014) . 
[0 0 74] 02Ofc:^Lrt:ffcH-, mAtikVM 

231' «0i!)#^o^Tia B ^-r4. 
[0075] i-f , 8kW-7 x-Xf*D»H^fc:ov^TK* 

[0076] 02 1£, |fttf7x— X-CCD-fe^ *yr-f 

a*. •b^ J uyf--<*'y^-'ts-^^S3i' 

^j.-- fC0lf^>-XxA^^$tT.TV^V^«» (-CO 

[0077] t-T, «S • |g3BMMW*IW»*llHi. 

AaJ^Jffll^lMSrffl^T, ^^B16l~, 081C^L 

* t/iffi^-b^i y -r 4 #y i^-'fa • ^it^^ss 

KffiM^TK-T&^x-yT^lOl). d<?)B®±T-, « 
4v>ti^LJ: o t LT^&ffi#B^X7%k<r>«j£«Ss£ 

^^_^^._X131£0?IJ45^S:W$^, 

[0078] W&fci'oT, JL— ftOtf^^X 

■rA«0«JftflSH3WaSW$ii6 k « (Xx 7°S2102) , tit 
fg-b^f jl y -f-f y ^-S^*JffllSS112{±, i^x-r 
^Stt«iT-^'<.-X131Cfc^T?iJ45C TYesj *<S 
iS$i!T:v^?,SYSlD^JSWtt^»ilTV^AUDITIDt5«kI/ 
PL1CYIDS:, Wi'Jf'fSI- ^7*0^5 Af- ^ 
<-X133*^^-T4. 

[0079] -eft.*^. flHfrfe**y'T4H?y2/H«w 

»Jffliail2«. @2 2t:StJ:^. isXT&ffi&Wls 
fflfgT-^<-X13HCiJV>T5l]45tC r Yesj 
T^4fflclBa$ix^W#2201^J: *)&%.Ztl&mim 
Vbmz. SI^Ss^SYSIDt^j5#(t^tlTUI>P0L]CY] 
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4 jK'J ^-r-^"<-^.132J; 91f S > 2202fc . 
BufBSYSID« il/MfaPOLiaiD^MJStttt^ixT AUD 

gro ^7 AfcttiStttfO^lSIS&EB^^fgilft 
LT*Kfciv-0 2203iiSrlS^t^. -fe a 'J T" < tt« 

9(c*UfcJ:3*« ^XxAlffiygStitlfiT 1 -^-* 
13H:iJV^T?iJ45t ryesj tfim^tlX^^^^iAUZ 

ftfcSYSI DtcWJBWt L>tlt -fe* * 'J -r -f *S ■ 
I*£7U;/5A^-:?^-X133tcl3i:£ix-tV->£P0LlC 

YIDcOSfe^aJ3'JfcJ:V-fe d fi , J7 : --f (fflfS-t^f a U 
^-tfy^-^'-^-xmiO^T'^S) £31 L 
TtfflfS-b^i U S'— §aRHffi£Sl^"£ 
<yrS2104). £*>HBI±T. a.— 

•r 4 JfimSrfg^ LjMSW £ d t & . 
14, fifSS-te* * 'J T < JK'J 

Sb^I£iB$*ufcfTtf>5fl54fc:, StR^PSi: LT r YESj A* 

[008 1] <Mc, Wfl:J:-5t. ffifS-b^ a'J x-f 
* 'J Is- rfmiZtlZ tUf'y TS2105) , flf ffl-fe^ a 

y-r * ^'J v— /-fe^f a yf -ffs • i$7'o/^AS 

jlttttfcJISISBl 13J4 , X f -y rS2101~S2105fc: <fc OiMtf? 

^Wlt<7)?"J623, 633t r Sj Wf -yrS21 

06). Cltf>ttaj#W*i. ftfcBl O-CSUfc^J* 

[0082] JJLtC J: 0 , a.—r'rtimi'A-T Atcjgffl 

A*>\ -fe^jLyx-f'-Ky^-t^-i^ESSSl' KRJE 
[ 0 0 8 3 ] . «A7 x -XTtfH&ftsCOV vcBHH 
[0 084] H2 31C. ^A^x-XT-^-fe^a.y-T'f 



Rtt7x-X*tSfc-fe**yf^>Kys'-*«- 

[0085] £i\ HMfrfe^a'J^^^U v—/-te*A 
"jf^W- !SaEra^5AreiWJiHW»113»i. « 

a ■ S3S«mn-KeB2±(?yi^ • m^rv^^^m* 

03 5 -bdfi'J-f-f 1=3 • K7"o/7Af-^- 
^133<0*tlSf+tt<^633fc rgj tfV-^SfUfcSSET* 
*>y h 1 7-^33Sr^-t-cet&L. f3 ■ £ 
**«MMWB2JiK-fe* * 'J -r i£3£SB140£fltSg-f & 
(Xx'yrS2301). 

[0086]-b^jL'Jx-f E3SEatl40*i. KSW^^^- 

y f -f iK y * y f - jfiffi<o^Sfiw*^ 

^-/■fedf- a y t- -f ^ • gsrn^5AiattftK« 

SE113lcjE^-f h . WfS-b^r a y -r 4 ^ U S/-/-fe^f * U 

«S^flfi/-b ;i 'fiy^•^ ; t^«7 ^ -^' < •-• ;:^ •135<^)|*3§$^H 

«r-T4 (X^r-y TS2302) • 
[0 087]^, -ff^-fedf Ay^f-f !K'J v— /-fedf a 

aj^«iJWSP1145r^L-T. J: OiSSEgmffiS^ 

SrSttWt 4 1 ( •■/ 7^2303) , • S3E^m>-X 
T-AOT«fiS;«Sffl$g/-fe^ a y T 4 

* LT V^^EP©Jil**^aj*-r 4 ( "> 7-S2304) . 

[oo88]^24tc. m^gkm^wcv—mz^-?. 

f8/-fe=Jr a 'J -r ^ ^®7 r -^"<-X135<^J72^te5ai^ix 
fcy^r^fWHHWIKJ: «9 ^3ft&fltJft«3S240l« 
C » SK«390S«I Dfc»J6fttt 4>ixT V ^POL I CY I DCO 

yx-fJS^ (ts^-fe^Ayx-f^y^-r-^^-^13 

2± 4 ) 2402t . SK«HOSYSlDt:#tiSf+H- 

h fxX 5"J 7 £ ilT ^ > 4 AUD I T I DiOi£iE 7° a ^ 7 A 

<9l££JBB£*H--?>I£S (S&K) »»2403i:*«BfiSii 

S£^ig*2403{i, <gm ■ fgrngH/XT^V) 

mtimtMnW*:* a »J ?■ 4 «JB-f-^<-^135Wjf?3 

fciaasiifc-fe* a y f - ^flHBfc*^t^^*s*i* . 
#iart- § ^fA«*=>fa y -r ^ :k y s^-ssk i 
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oTjg^s. man. ^ru^^Mz-»mn»hixtz 

4 ^§8139^*0 Lfc^IET 7 -b .X^JRStf-b* a U 
f •fMt'irS. -I«D%£\ H2 5^-r<tat. ^jE 

[0089] . 'g^ii. zcrffi&mgm&mfr 

^ e*5£ LJtffi^-b^f x 'J T" < JKU S'-** ^"t-fe 
* i 'J x 4 ifcSfcTJSlJfetfSte S £ fc #T'£ . -b* 

&c\ktfX'Zh. 

[0090] mz. fifs-fejfA'jf ^'jw-fe^-a 

^S^SrSWW^i: ( Xx y TS2305) . A£fi7J$iJ 

wmuzft^x. m^msmz. taw. 

■T-i'gm ■ M7o/7Af- ? / <— X133cO*tJS#tt 
^iJ633tc: rgj ifi-7—9^tltz^m7°X3^yM,<7y^i^ 

W^£it5^&/^«0B®£S^Ki~& <Xx y7*S230 
6). -KOHHTJi, -b^x'Jx -flrS • l^'n/7A 

^4MRI7 , a^5Afe:»j6i-4P0LICYlD61«OflM8-fe^ 
ft (It****!^**^— t*-*^-*132J:9W 

[00 9 1] ST. *S#£J:9. firn/7AA<S 

-/-b^f i u x -< «s • ^Tn^yM,mmmwmm 

-^33Sr^tTiei!)L, ■ 8aE*t«fl««32±K-b 
* a U x 4 1^^1392: m^-TS 752308) . 

[0092] -b^iU-f'fl : SgP139li. 
^aE*t^lt»lS32±lc«lg AfcWBW 
(t^iXTV^tilfg-b*- a'Jf -f^'J S*-— rffart-b* a >J 
■r-fS(S«t:fi6->fc«Sl«:»T^-4. fcfcitf. 01 2k: 

M®Sr. ^ y hV-^33S-T>L-C. -fe^f jlUt-^sKUv' 



-1^ • 1£^E31 ' *»£A#U -ecort^^^t-b 

[0093] BUifc: J: *) . JL-ifj5flWS LfcflWRS'*x 
Ate. BHH-7 x-XTSfeSLfcflWR-fe'f * 'Jf •( sK'J ^ 
-#*?>-b*.x D x -f iiJibWWfcSiVC V**£ 4: 2:S1#? 

[0094]»;C, 3IJB7 x-XT'«OiMEfcovvtgiHB 

[0095] H2 6CI. iffl7i-XC<Ot*il/f 4 
^U^-W- !S3£E31' <0»##NI£5H". 
BSfi. 3WB7x-XTO«uiK:J:9. i£H-7x-XT-«fc 
^ L^-fS^-b^ a U t 4 ?KU >—#^<7)-b^ j,. ij -r >f J6 

[ 0 0 9 6 ] *-*\ flWB-fe* *'Jf^'J Wt^fa 

ijf^w- iaEro^5^i!raft»iiso«»ii3ii, 0 

2 3 tC^L^^X v 7 - S2301—S2302$-^W(3^tL 
(^T--y7°S2601~X'r-y7'S2602). ■ S^f^v' 

( y 7S2603) . H 2 3 U^S2304~S23085:^ 
fi^S (Xx»y 7^2604). 
[0097] Cl<7)J;atC-rS^i;T\ ta^ti:. SSt^ 

/-fe^f iOf< «®-r-^ y <.-xi35c0l*l#fc*-^v^T# 
jaS*LfclBBS««ft«3!>»6. ^x-Xttt. V7 

4. -?-LT. ^icJEDT^IS^X-rAiO-b^AUx-f 
[0 098] ±tz. CERTfWbJfa'Jf 
t SrKg-nLT . -bdf a'Jf^*-WA7 
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